Privacy Policy

1.1 Information You Provide

We collect information you voluntarily provide when registering an account, creating a project, submitting a Loom video, leaving a comment, or contacting us. This includes your name, email address, profile picture, job role, and any content you submit to the platform.

1.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical data including your IP address, browser type, device type, operating system, referring URLs, pages visited, and timestamps. This is collected via cookies, server logs, and similar technologies.

1.3 Third-Party Sign-In

If you sign in using Google OAuth, we receive your name, email address, and profile image from Google as permitted by your Google account settings. We do not receive your Google password.

We use the information we collect to: provide, operate, and maintain our platform; process payments and manage financial transactions; send transactional emails such as project updates, milestone alerts, and password resets; personalise your dashboard experience based on your role (Admin, Moderator, Tech, Client); improve our services through internal analytics; comply with legal obligations; and respond to your inquiries and support requests.

We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted third-party service providers who assist us in operating our platform, including: Supabase (authentication and database), Stripe (payment processing), Resend (transactional email), Cloudinary (media storage), and Vercel or Render (hosting infrastructure). These providers are contractually obligated to handle your data securely and only as directed by us.

We use session cookies to keep you logged in and preference cookies to remember your settings. We do not use advertising or cross-site tracking cookies. You can control cookie behaviour through your browser settings, but disabling cookies may affect platform functionality.

We retain your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it for legal or financial compliance purposes.

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), hashed credentials, role-based access control, and regular security audits. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; object to or restrict certain types of processing; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at hello@forgepilot.io.

ForgePilot is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Continued use of ForgePilot after changes become effective constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: hello@forgepilot.io. We aim to respond to all enquiries within 5 business days.